Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132643a3a2f34382d3438203d3e203533333536.roa
File:                     323630323a666564323a373132643a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          OWbRCKRrqbtN4PekIIUcFqmQ4TH5BFACyA2bGEx8oiA=
Subject key identifier:   0A:52:F4:A6:75:FE:AC:E5:BD:AC:62:AE:3A:57:5E:FE:4A:9B:76:8D
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       02E99BCB3E5C2B1BE02239E2011F7D4BEEC755E8
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132643a3a2f34382d3438203d3e203533333536.roa
Signing time:             Thu 16 Dec 2021 03:26:29 +0000
ROA not before:           Thu 16 Dec 2021 03:21:29 +0000
ROA not after:            Thu 15 Dec 2022 03:26:29 +0000
asID:                     53356
IP address blocks:        2602:fed2:712d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e9:9b:cb:3e:5c:2b:1b:e0:22:39:e2:01:1f:7d:4b:ee:c7:55:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Dec 16 03:21:29 2021 GMT
            Not After : Dec 15 03:26:29 2022 GMT
        Subject: CN=0A52F4A675FEACE5BDAC62AE3A575EFE4A9B768D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:81:ca:63:94:ce:82:0b:a6:af:2b:23:68:
                    19:7a:7e:0b:b4:cf:cb:27:ab:45:d6:69:d8:e0:80:
                    bc:d6:0d:71:f9:46:40:37:42:74:b2:a7:e7:f6:76:
                    1d:a0:4d:cc:80:de:85:50:8a:dd:47:4c:45:bb:2c:
                    8c:5e:77:72:fd:14:da:90:70:7f:66:28:57:52:c7:
                    58:2d:f3:1d:8e:ff:28:dd:8e:d3:90:4b:6b:2e:39:
                    c6:37:cf:6b:66:31:f0:84:f2:2d:be:46:b0:33:c1:
                    6f:95:91:9f:82:8c:33:4a:b7:3b:96:28:7d:89:19:
                    1f:e4:0f:b8:b7:8a:38:5a:32:a5:d8:1b:a2:34:46:
                    f5:0b:71:ab:06:e5:5a:90:c2:b7:db:e1:60:b7:7e:
                    0e:5a:b3:e4:ee:db:99:64:af:24:0a:24:9d:0f:9d:
                    ea:58:a6:bd:59:ad:3c:e8:f1:0b:7e:fb:b4:95:df:
                    a9:5b:ef:5c:74:a1:21:16:07:32:12:a6:a8:23:64:
                    00:d5:a5:92:5e:9d:82:2d:4f:6d:e0:52:a3:04:fb:
                    76:0d:23:f5:79:f7:45:51:6c:b0:63:61:62:22:9f:
                    f8:72:79:3f:0b:16:7b:b7:5f:f5:1c:4d:b3:21:bc:
                    05:bb:bb:54:b3:57:b0:67:94:46:5b:ad:7c:34:39:
                    9b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:52:F4:A6:75:FE:AC:E5:BD:AC:62:AE:3A:57:5E:FE:4A:9B:76:8D
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373132643a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:712d::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:40:7f:42:a0:e4:46:d6:72:e6:fb:37:f6:30:39:fe:b7:f4:
         75:56:26:d7:b9:72:0d:62:b0:50:c8:ce:fc:91:49:ba:b2:7c:
         34:3d:63:39:f9:ac:fd:b2:68:d8:e1:85:b1:d8:15:da:d6:46:
         29:60:30:30:95:fa:5d:ab:dc:f5:b4:6f:a9:a1:ec:4c:e5:ac:
         95:4b:6a:9b:93:10:4e:66:19:f4:76:a5:d2:4e:5a:49:b9:ba:
         7d:8c:4b:58:ba:5b:3c:51:e3:14:8d:0f:93:50:f8:75:24:a4:
         38:08:23:aa:26:df:e6:b4:79:c3:96:21:dc:92:e9:b2:4a:d1:
         24:f6:a2:42:7d:4a:74:f4:1b:90:39:90:1a:b4:31:5b:32:49:
         1d:9d:11:6a:7b:1d:f3:c1:25:0a:d5:ff:a3:7d:1a:36:53:7d:
         82:9c:16:72:02:2c:65:aa:ed:0c:eb:85:c1:53:ed:9c:a9:c6:
         42:59:21:3e:2c:fb:6b:0e:f6:67:60:44:a9:0a:6a:db:a1:6d:
         27:19:3b:07:28:69:1d:f2:da:d3:8a:4a:6a:9b:94:7a:e2:f0:
         f6:9f:dd:e6:dc:b7:54:0b:d9:88:16:b4:19:b4:af:ba:6f:e8:
         f4:23:30:1c:f4:58:84:dc:cf:c8:0b:3c:9b:d8:9c:ad:01:26:
         0e:8c:c2:c7
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUAumbyz5cKxvgIjniAR99S+7HVegwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjExMjE2MDMyMTI5WhcNMjIxMjE1MDMyNjI5
WjAzMTEwLwYDVQQDEygwQTUyRjRBNjc1RkVBQ0U1QkRBQzYyQUUzQTU3NUVGRTRB
OUI3NjhEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmmBymOUzoIL
pq8rI2gZen4LtM/LJ6tF1mnY4IC81g1x+UZAN0J0sqfn9nYdoE3MgN6FUIrdR0xF
uyyMXndy/RTakHB/ZihXUsdYLfMdjv8o3Y7TkEtrLjnGN89rZjHwhPItvkawM8Fv
lZGfgowzSrc7lih9iRkf5A+4t4o4WjKl2BuiNEb1C3GrBuVakMK32+Fgt34OWrPk
7tuZZK8kCiSdD53qWKa9Wa086PELfvu0ld+pW+9cdKEhFgcyEqaoI2QA1aWSXp2C
LU9t4FKjBPt2DSP1efdFUWywY2FiIp/4cnk/CxZ7t1/1HE2zIbwFu7tUs1ewZ5RG
W618NDmb6wIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFApS9KZ1/qzlvaxirjpXXv5K
m3aNMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8wLzMyMzYzMDMyM2E2NjY1NjQzMjNhMzczMTMyNjQz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMzMzMzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+
0nEtMA0GCSqGSIb3DQEBCwUAA4IBAQCcQH9CoORG1nLm+zf2MDn+t/R1VibXuXIN
YrBQyM78kUm6snw0PWM5+az9smjY4YWx2BXa1kYpYDAwlfpdq9z1tG+poexM5ayV
S2qbkxBOZhn0dqXSTlpJubp9jEtYuls8UeMUjQ+TUPh1JKQ4CCOqJt/mtHnDliHc
kumyStEk9qJCfUp09BuQOZAatDFbMkkdnRFqex3zwSUK1f+jfRo2U32CnBZyAixl
qu0M64XBU+2cqcZCWSE+LPtrDvZnYESpCmrboW0nGTsHKGkd8trTikpqm5R64vD2
n93m3LdUC9mIFrQZtK+6b+j0IzAc9FiE3M/ICzyb2JytASYOjMLH
-----END CERTIFICATE-----